CVE-2026-33284
GlobalLeaks has insufficient URL validation in user support API
概要
GlobalLeaks has insufficient URL validation in user support API
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov